diff options
| author | Monthadar Al Jaberi <monthadar@FreeBSD.org> | 2013-02-07 21:22:14 +0000 |
|---|---|---|
| committer | Monthadar Al Jaberi <monthadar@FreeBSD.org> | 2013-02-07 21:22:14 +0000 |
| commit | c81ceff7c7fa4d44cef082b4fc196034791dacec (patch) | |
| tree | a828495fb4ef719cbde963afa64c4906770be1d4 | |
| parent | cd47d75c70ae7d37997b5f61f2c2f0287f7ad6f1 (diff) | |
Notes
| -rw-r--r-- | sys/net80211/ieee80211_input.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/sys/net80211/ieee80211_input.c b/sys/net80211/ieee80211_input.c index a9acad189b32..ebc4642f4975 100644 --- a/sys/net80211/ieee80211_input.c +++ b/sys/net80211/ieee80211_input.c @@ -776,6 +776,10 @@ ieee80211_parse_action(struct ieee80211_node *ni, struct mbuf *m) /* verify something */ break; case IEEE80211_ACTION_MESH_GANN: + IEEE80211_VERIFY_LENGTH(efrm - frm, + sizeof(struct ieee80211_meshgann_ie), + return EINVAL); + break; case IEEE80211_ACTION_MESH_CC: case IEEE80211_ACTION_MESH_MCCA_SREQ: case IEEE80211_ACTION_MESH_MCCA_SREP: |